Read the docs

DOS Co., Ltd.

Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

DOS Co., Ltd. records in CISA KEV

No DOS Co., Ltd. vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Rakuraku Pc Cloud Agent 3 records MEDIUM Ss1 3 records MEDIUM

Records

3 records in Ss1 · all components

TI-2023-08600 CVE-2023-22336 · GHSA-34gr-jxh4-rxfv

Path traversal in DOS Co., Ltd. SS1 and Rakuraku PC Cloud

Priority MEDIUM 51

Path traversal vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to upload a specially crafted file to an arbitrary directory.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01099 Published 2023-03-05 No fix listed CWE-22
TI-2023-08607 CVE-2023-22344 · GHSA-63wr-jpff-c77r

Hard-coded credentials in DOS Co., Ltd. SS1 and Rakuraku PC Cloud

Priority MEDIUM 50

Use of hard-coded credentials vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to obtain the password of the debug tool and execute it.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00861 Published 2023-03-05 No fix listed CWE-798
TI-2023-08599 CVE-2023-22335 · GHSA-44rp-5567-c4w9

Improper access control in DOS Co., Ltd. SS1 and Rakuraku PC Cloud

Priority MEDIUM 40

Improper access control vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to bypass access restriction and download an arbitrary file of the directo…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00742 Published 2023-03-05 No fix listed CWE-284
Open these records in search →